Re: what difference between Integrated Windows Authentication in IIS configuration and Active Directory

From: Ken Schaefer (kenREMOVE_at_THISadopenstatic.com)
Date: 01/29/05 

Date: Sat, 29 Jan 2005 22:51:57 +1100

"Di" <dyw55a@yahoo.com> wrote in message
news:1106939278.341189.214160@z14g2000cwz.googlegroups.com...
> Ken - Thank you very much for your reply.
>
> Could I make following conclusion?
>
> 1. If web server (windows 2000) is in the same domain as Active
> Directory, then you use IWA to authenticate username/password and
> doamin is actually using AD, right?

No - IWA is just a way of getting the credentials from client (eg browser)
to server (IIS)

If user enters Domain\Username then you will attempt to authenticate against
AD
If user enters Machine\Username then you will attempt to authenticate
against the local accounts database on IIS

> 2. If web server is in the different domain from AD, then you use IWA
> means you authenticate the username/paswword and domain through
> whereever domain the web server locate and you could not really use AD,
> right?

I'm not sure I understand what you are saying here. Are you talking about an
NT domain? All other domains (Windows 2000, Windows 2003) involve Active
Directory. You can't have a Windows 2000/2003 domain without AD. If you have
an NT domain -and- you have a trust relationship between the NT domain and
AD domain, then you can use ADDomain\User or NTDomain\User

Cheers
Ken

Relevant Pages